Legal
Privacy Policy
Effective date: 21 October 2026
This policy explains what data Roadmapper (operated by Cognix, India — the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023) collects, why, and the choices you have. It applies to roadmapper.space, app.roadmapper.space and our mobile apps. Questions: cognix@roadmapper.space.
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email, name, profile photo, phone number (if you sign in by phone), bio | You / the account you sign in with (Google or GitHub) |
| Learning activity | Roadmaps and goals, study sessions, quiz & practice answers, flashcard and spaced-repetition reviews, streaks (including streak freezes), notes, tasks | Your use of the Service |
| AI conversations | Messages you exchange with the AI tutor and document chat | You |
| Uploaded documents | PDFs/images you upload, the text we extract from them (including OCR), and vector embeddings used for search | You |
| Career artifacts | Job descriptions you paste, generated resumes, cover letters, LinkedIn posts | You / generated |
| Job applications (optional) | Jobs you choose to track: company, role, location, posting link, the platform you applied through, status changes and their dates, interview rounds and outcomes, notes, which resume you sent, a recruiter’s name and work email if you add them, and the latest referral or follow-up draft you asked us to write. Enter only contact details you have been given for your own application | You, typed in or shared into the app |
| Mock interviews (optional) | For a mock interview you start on a tracked job: the questions asked, the answers you type, and the scorecard (scores, feedback and example answers). Answers you score low on can be saved as flashcards on your roadmap | You / generated |
| Reports of AI content (optional) | When you tap “Report this” on something the AI wrote: the reason you picked, any note you add, which item it was, and a copy of the reported text as you saw it (which can include your own résumé or answers) | You |
| Onboarding answers (optional) | What you tell us when you join: your goal, career and job-search stage, the role you’re aiming at, an interview date, where you heard of us, and the campaign tags of the link you first arrived from | You |
| Calendar (optional) | Availability (free/busy), event titles shown in your calendar view, and study events we create — only if you connect Google Calendar. If you also turn on “Spot interviews in my calendar”, the title, time and organiser’s email domain of upcoming events, checked against the companies you track. We keep only the time and type of a matched interview and a one-way hash of the event’s id, never its title or description | Google, with your consent |
| Payments | Plan, transaction references and status; for purchases in the Android app, the Google Play order number and purchase token, and whether a subscription is set to renew. Card/UPI details are handled by Razorpay or Google Play and never touch our servers | Razorpay; Google Play |
| Website email signups (optional) | Your email address; for the teams waitlist, your organisation and number of learners; the campaign tags of the link you arrived from; and the consent line you ticked | You, on roadmapper.space |
| Technical | Log data, device/browser type, timezone, push-notification tokens, crash and error reports, in-app usage events (which features are used), and the days on which you used the Service | Automatic |
2. How we use it
- Providing the Service — generating roadmaps and study content, answering your questions with context from your documents, tracking progress, scheduling study time, building career documents, keeping track of the jobs you apply to.
- Personalisation — adapting content, reminders and recommendations to your activity, and pointing you at a first step that fits your onboarding answers.
- Understanding what helps — counting how many people sign up, finish onboarding, start a roadmap or track a job, and come back. Your goal, stages and where you heard of us are added to our usage analytics only if you switch that on; you can switch it off in your profile at any time. Your name, email and target role are never added.
- Plans and billing — enforcing plan quotas, processing purchases, preventing abuse and fraud.
- Communication — service messages (receipts, plan expiry) and optional study reminders/notifications, which you can turn off. If you left your email on our website, launch news and product updates (or, for the teams waitlist, news about the teams pilot) — nothing else, and you can unsubscribe at any time.
- Improvement and safety — debugging, measuring aggregate usage, securing the Service, and reviewing AI content you report so we can fix or remove it.
We do not sell your personal data, and we do not use your content for advertising.
3. AI processing
To generate output, relevant parts of your prompts, learning context and document excerpts (and, when you ask for a referral or follow-up draft, the tracked job’s company, role, contact name, posting text and your résumé summary; during a mock interview, that job’s role, posting text and résumé summary with the answers you type) are sent to third-party AI model providers — currently Google (Gemini), with OpenAI as a fallback — acting as processors under their API terms. Per those API terms, this data is not used by the providers to train their models. We do not use your private content to train models of our own.
4. Google user data (Calendar and Sign-in)
If you connect Google Calendar, we request the minimum scopes needed to (a) read availability and events so we can display your schedule and avoid conflicts, and (b) create the study events you approve. If you turn on interview detection, the same read access is also used to (c) suggest interview rounds on the job applications you track: we look at the next three weeks of event titles, times and organiser domains, and nothing changes in the app until you confirm a suggestion. Calendar data is used only for these features, is never sold or used for advertising, and connection can be revoked at any time in the app or at myaccount.google.com/permissions. Our use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.
GitHub sign-in. If you sign in with GitHub, we receive your name, primary email address and profile photo from GitHub, and nothing else: we do not request access to your repositories, and you can revoke the connection at any time in GitHub under Settings → Applications.
5. Who we share data with
Only service providers who process data for us, under contract:
- Google Cloud / Firebase — authentication, file storage (documents are stored in a private bucket), push notifications;
- Google (Gemini) and OpenAI — AI generation (Section 3);
- Razorpay — payment processing on the website;
- Google Play — payment processing for purchases in the Android app (we receive the order and its status, never your payment details);
- Hostinger — server hosting;
- Google Analytics — aggregate usage measurement in the app, and on the website only if you allow it (Section 10);
- Sentry — error monitoring (technical data only).
We may also disclose data where the law requires it, or to protect the rights and safety of users and the Service. Some providers process data outside India (for example in Google Cloud regions); where they do, contractual and technical safeguards apply.
6. Security
Data is encrypted in transit (HTTPS everywhere); documents live in a private, access-controlled storage bucket; passwords are never stored in plain text; production access is restricted. No system is perfectly secure — if we learn of a breach affecting your data we will notify you and the authorities as required by law.
7. Retention and deletion
- Your data is kept while your account is active.
- An email left on our website is kept until you unsubscribe or ask us to delete it.
- Deleting a document removes the file, its extracted text and its search embeddings.
- Reports of AI content are kept until we have reviewed them and for as long as your account exists; deleting your account removes them.
- Deleting a tracked job application removes it with its timeline, interview rounds, notes, saved drafts and mock interviews. Archiving only hides it.
- Deleting your account (Profile → Delete account in the app, or by emailing cognix@roadmapper.space; see how to delete your account) removes your personal data from live systems at once (within 30 days for an emailed request); encrypted backups age out within a further 90 days. We keep minimal payment records, without your name or email, as long as tax law requires, and a one-way fingerprint of your email with the free uses already taken, so a new account under the same email doesn’t restart the free tier.
8. Your rights
Depending on where you live (including under India’s DPDP Act and, for EEA/UK users, the GDPR), you can: access a copy of your data; correct it; delete it; withdraw consent (e.g. disconnect calendar, disable notifications); and complain to a supervisory authority. Exercise any of these by emailing cognix@roadmapper.space from your registered address — we respond within 30 days.
9. Children
The Service is not directed at children under 13, and we do not knowingly collect their data. Users under 18 require the consent of a parent or guardian (see the Terms). If you believe a child has provided us data without consent, contact us and we will delete it.
10. Cookies and local storage
The app uses what it needs to work — authentication tokens (kept in secure browser/app storage) and basic preferences — plus Google Analytics for Firebase to measure, in aggregate, which features are used and where people get stuck. Its advertising features are switched off.
On the website (roadmapper.space), nothing is loaded and no cookie is set unless you choose Allow in the analytics banner. If you do, Google Analytics sets first-party cookies to measure which pages and links bring people in. You can change your choice at any time with Analytics preferences at the bottom of the site. We do not use advertising cookies or cross-site trackers.
11. Changes
We will post updates here and, for material changes, notify you by email or in-app before they take effect.
12. Contact / Grievance Officer
Cognix · Roadmapper — cognix@roadmapper.space. Grievances under Indian law are acknowledged within 48 hours and resolved within 30 days.
Registered address: Talpali Pada, Balangir, Odisha 767001, India